Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/lPJMYJc2EHeNAl6MOrd-ycnIBT0.roa
File: lPJMYJc2EHeNAl6MOrd-ycnIBT0.roa (raw, json)
Hash identifier: ie1MdmVI+D+PtKWeKyqSPhCGTlWv0KyEXG+HggbcN4s=
Subject key identifier: 94:F2:4C:60:97:36:10:77:8D:02:5E:8C:3A:B7:7E:C9:C9:C8:05:3D
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 018571D7A73C6B1D68A693AB68A7EAA0404C
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/lPJMYJc2EHeNAl6MOrd-ycnIBT0.roa
Signing time: Mon 02 Jan 2023 09:37:16 +0000
ROA not before: Mon 02 Jan 2023 09:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201962
IP address blocks: 91.205.12.0/22 maxlen: 22
185.58.28.0/22 maxlen: 22
45.153.176.0/22 maxlen: 22
2a04:df80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:a7:3c:6b:1d:68:a6:93:ab:68:a7:ea:a0:40:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: Jan 2 09:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94f24c60973610778d025e8c3ab77ec9c9c8053d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9b:55:78:a6:b8:ee:56:d2:d9:ed:23:db:48:
61:fd:6a:6b:43:92:43:f3:81:96:b3:78:b1:d7:a1:
38:37:2d:09:0d:45:d8:20:b2:81:64:fe:b1:0d:4a:
e7:f7:ac:91:5e:7c:bc:82:69:91:70:f9:c6:87:6c:
d5:7e:e7:ad:3a:53:4b:0b:f7:b0:0d:89:31:86:aa:
3c:df:f9:6a:36:df:ff:32:f8:b8:d9:97:f7:f7:6a:
30:e7:78:ad:61:c8:95:29:b9:7d:74:73:4a:1b:b4:
4d:3d:6d:08:82:09:62:3b:40:d7:8b:cb:20:1e:a4:
ee:45:90:d7:9d:46:c7:3b:1e:7c:5b:94:fa:bb:5b:
a7:c3:e6:5e:ec:60:9a:3d:cd:b5:14:53:ef:db:db:
ac:0a:5c:ea:c9:07:55:d2:58:56:d4:f9:65:04:19:
7d:36:f8:09:66:7f:bf:4b:04:ea:cc:07:de:12:04:
8f:eb:c8:31:6b:7d:d7:a6:a2:60:01:0d:08:24:41:
33:20:1e:3d:2f:64:f1:6a:9f:de:ea:5b:87:ac:1f:
e8:9d:a2:b5:6c:d3:c4:bc:94:47:6c:a6:1b:79:97:
c6:7b:be:d6:a6:f9:23:5b:6e:9d:2b:25:00:e8:04:
ab:ab:ae:cd:a5:d5:d7:3d:4f:2d:d0:65:19:03:bf:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F2:4C:60:97:36:10:77:8D:02:5E:8C:3A:B7:7E:C9:C9:C8:05:3D
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/lPJMYJc2EHeNAl6MOrd-ycnIBT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.176.0/22
91.205.12.0/22
185.58.28.0/22
IPv6:
2a04:df80::/29
Signature Algorithm: sha256WithRSAEncryption
40:0d:3e:36:1c:4f:b6:11:d6:a9:07:0a:8d:59:c4:be:1f:98:
b1:66:55:c8:41:24:71:e7:e3:7f:e9:5d:3d:ad:6f:d1:03:cb:
04:90:bf:59:9e:7a:e6:24:37:dd:71:c0:cf:db:54:30:bb:ce:
ad:af:91:57:33:6b:5a:01:7b:f5:41:ac:73:5e:bf:03:75:3d:
ec:03:4b:f9:af:da:f3:d3:ee:6f:bc:c9:83:92:94:bd:29:62:
ae:7e:44:11:3a:52:8e:df:b6:b8:be:c6:19:0d:b9:bd:ac:da:
44:d3:ec:f5:e9:f2:db:ac:a8:e2:72:49:d7:75:0f:bb:11:9c:
ec:a1:c1:90:2b:a0:2e:d4:3d:a4:1e:99:5f:1e:3f:17:7a:4a:
65:35:d8:8b:50:4e:de:2e:80:92:8a:5c:a6:74:98:5b:d7:fd:
fb:eb:a4:05:07:9b:99:e8:ac:3a:01:4e:7f:dd:da:4d:59:79:
9b:4b:62:43:28:76:b1:78:65:dc:5b:db:0a:be:47:03:52:2a:
83:33:1c:bc:89:d8:c5:03:01:7a:ed:5f:eb:6b:3f:85:3c:c4:
01:73:20:6d:9b:84:c7:2e:f7:d6:60:a0:fc:ef:ce:28:5b:cb:
79:01:69:25:ab:78:61:07:0a:bf:23:39:be:48:8a:2a:98:d5:
00:f6:2a:5c
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVx16c8ax1oppOraKfqoEBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMGY4NjRiYTBmYTIwNGRlOTNhYzVhYTg0ZjcyOGI2MjIw
YzZmN2MwHhcNMjMwMTAyMDkzNzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGYyNGM2MDk3MzYxMDc3OGQwMjVlOGMzYWI3N2VjOWM5YzgwNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5tVeKa47lbS2e0j20hh/WprQ5JD
84GWs3ix16E4Ny0JDUXYILKBZP6xDUrn96yRXny8gmmRcPnGh2zVfuetOlNLC/ew
DYkxhqo83/lqNt//Mvi42Zf392ow53itYciVKbl9dHNKG7RNPW0IggliO0DXi8sg
HqTuRZDXnUbHOx58W5T6u1unw+Ze7GCaPc21FFPv29usClzqyQdV0lhW1PllBBl9
NvgJZn+/SwTqzAfeEgSP68gxa33XpqJgAQ0IJEEzIB49L2Txap/e6luHrB/onaK1
bNPEvJRHbKYbeZfGe77WpvkjW26dKyUA6ASrq67NpdXXPU8t0GUZA7+z8wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFJTyTGCXNhB3jQJejDq3fsnJyAU9MB8GA1UdIwQY
MBaAFLoPhkug+iBN6TrFqoT3KLYiDG98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWctR1M2RDZJRTNwT3NXcWhQY290aUlNYjN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lZWQ4NTMtM2IzNi00NWVkLTk1MzMt
YjE3YzJhZmZhMzBiLzEvbFBKTVlKYzJFSGVOQWw2TU9yZC15Y25JQlQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9lZWQ4NTMtM2IzNi00NWVkLTk1MzMtYjE3YzJhZmZhMzBi
LzEvdWctR1M2RDZJRTNwT3NXcWhQY290aUlNYjN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLZmwAwQC
W80MAwQCuTocMA0EAgACMAcDBQMqBN+AMA0GCSqGSIb3DQEBCwUAA4IBAQBADT42
HE+2EdapBwqNWcS+H5ixZlXIQSRx5+N/6V09rW/RA8sEkL9ZnnrmJDfdccDP21Qw
u86tr5FXM2taAXv1QaxzXr8DdT3sA0v5r9rz0+5vvMmDkpS9KWKufkQROlKO37a4
vsYZDbm9rNpE0+z16fLbrKjicknXdQ+7EZzsocGQK6Au1D2kHplfHj8XekplNdiL
UE7eLoCSilymdJhb1/3766QFB5uZ6Kw6AU5/3dpNWXmbS2JDKHaxeGXcW9sKvkcD
UiqDMxy8idjFAwF67V/raz+FPMQBcyBtm4THLvfWYKD8784oW8t5AWklq3hhBwq/
Izm+SIoqmNUA9ipc
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:42 2024 by rpki-client on console-ams.rpki-client.org